Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313130303a3a2f34302d3438203d3e2033323039.roa
File: 326131333a646638303a313130303a3a2f34302d3438203d3e2033323039.roa (raw, json)
Hash identifier: Ikz4opYyodYJNFx7PWJvRZiUlYI1SQtWv+iwFBPSU3Y=
Subject key identifier: E3:BB:9F:F4:26:D4:C2:00:F2:51:5F:26:AA:40:2A:D7:D3:7E:F5:84
Certificate issuer: /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial: 1E7935B19B43DC38FA2795D1F72101623AFCC784
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313130303a3a2f34302d3438203d3e2033323039.roa
Signing time: Thu 05 Oct 2023 16:07:41 +0000
ROA not before: Thu 05 Oct 2023 16:02:41 +0000
ROA not after: Thu 03 Oct 2024 16:07:41 +0000
asID: 3209
IP address blocks: 2a13:df80:1100::/40 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:79:35:b1:9b:43:dc:38:fa:27:95:d1:f7:21:01:62:3a:fc:c7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Validity
Not Before: Oct 5 16:02:41 2023 GMT
Not After : Oct 3 16:07:41 2024 GMT
Subject: CN=E3BB9FF426D4C200F2515F26AA402AD7D37EF584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:fc:68:6b:f9:52:2a:d8:fb:99:18:8e:5a:
c0:84:34:c9:f8:04:b2:43:a9:4b:df:61:e2:9f:7d:
f8:cf:8f:6e:3e:f3:77:27:3c:ad:b9:c6:82:d7:94:
cb:4f:52:42:57:f3:f3:86:74:fe:8c:78:05:5c:64:
8a:e1:65:c1:af:9c:6f:80:cc:64:df:3c:06:86:9f:
11:e4:1d:c7:45:e2:de:7a:8d:7f:75:f0:4b:99:ad:
23:13:93:01:da:55:99:7f:df:24:03:c9:35:ce:e0:
33:b8:5e:aa:49:6d:ac:5b:2f:f1:3a:59:68:c5:d9:
db:52:a3:e1:80:a3:76:a3:22:6e:b1:c4:9b:e9:e8:
f2:d8:53:63:0d:dd:1a:80:ce:ae:7b:9d:07:8f:26:
58:07:86:09:bf:f3:ef:e2:e1:af:cf:69:75:58:e5:
ba:a3:29:e6:2b:48:81:bd:39:3d:3c:72:9e:25:d5:
aa:fa:21:7b:71:c0:fb:53:99:4b:d0:75:16:bf:39:
ff:00:2f:bd:29:24:f7:17:27:74:58:0a:10:95:a2:
b1:23:8c:3c:a3:f1:93:f9:3c:e7:3f:a8:d8:de:23:
23:3a:b9:c9:b2:c6:c7:d2:ee:f2:b8:41:b0:c0:36:
82:09:d3:00:9f:da:60:41:08:56:bc:d9:02:34:4a:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BB:9F:F4:26:D4:C2:00:F2:51:5F:26:AA:40:2A:D7:D3:7E:F5:84
X509v3 Authority Key Identifier:
keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a313130303a3a2f34302d3438203d3e2033323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:df80:1100::/40
Signature Algorithm: sha256WithRSAEncryption
02:c9:9e:64:f2:62:6b:6c:d1:8b:10:e7:fa:69:d0:a0:56:4c:
d4:62:b1:58:61:02:94:9d:83:53:a7:75:c6:35:2c:e3:78:d6:
ca:74:a5:09:70:69:22:2f:0d:f9:80:db:70:53:d5:98:d2:cc:
3d:55:14:e1:6e:01:bc:80:5c:f1:1d:bd:1b:b1:3a:d9:7c:cb:
ff:a1:13:a3:0f:36:d7:41:14:df:31:cb:a4:45:97:ff:99:62:
86:b6:1d:43:32:71:f3:78:71:a8:22:69:66:fd:80:43:23:35:
a3:28:1d:56:aa:df:61:7c:43:c4:06:88:07:76:62:3c:8c:5a:
55:a2:17:4d:a2:b7:56:55:50:f0:98:58:88:58:00:72:c5:fc:
7f:18:f0:da:63:75:d5:e8:a3:ca:c3:84:75:30:b7:b2:36:50:
dd:bc:a2:0f:e0:06:77:af:16:14:77:0d:4c:69:61:6a:d7:e9:
3e:3a:db:37:79:3c:05:cf:07:05:16:9e:82:13:33:24:a6:49:
50:a9:0a:cc:1e:9b:fd:3f:6f:6f:35:3c:5a:43:4b:19:e4:80:
4e:e5:01:86:80:81:fa:64:76:89:82:fc:fb:e5:e8:7c:72:15:
41:46:6e:bc:99:a2:e9:47:e7:a5:28:ae:aa:6a:7b:ec:f1:7f:
dd:b6:6b:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 01:10:41 2025 by rpki-client